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DETAILED ACTION 

Continued Examination Under 37 CFR 1.114 

1. A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1 .1 7(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1 .17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on October 
13, 2009 has been entered. 

Acknowledgments 

2. Applicant's amendment filed on October 13, 2009 is acknowledged. Accordingly 
claims 1-2, and 4-40 remain pending. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 1-2, and 4-19 , are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Cheng et al (hereinafter "Cheng") U.S. Patent No. 2006/0282834 A1 
in view of Sadwosky U.S. Patent No. 6,123,737. 
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5. As per claim 1 , Cheng discloses a method of updating, the method comprising: 

Informing a notification history server of notifications sent by authorized senders, 
the notification history server keeping a record of authorized notifications, the 
notifications history server being distinct from the authorized senders (see fig. 1 , 
which discloses service provider computer system 102 and 
software vendor computer system 103; 0109, which discloses 
alternatively software vendors who contract with the service 
provider may provide the information about their software 
products and software updates ...directly to the service provider 
or to update database 709); 

receiving a notification in an electronic device that an update is available from a 
sender (0109; 0115, which discloses that when a new software 
update or software product is available, the service provider 
computer 102 sends an email to those users who have requested 
notification by email...); and 

determining the authenticity of the received notification in the electronic device, 
by sending, by the electronic device, information retrieved from the received notification 
to the notification history server, and determining whether the notification history server 
has a record of the notification using information sent by the electronic device; 

downloading the available update from the sender if the notification history server 
confirms knowledge (0115, which discloses that if the software 
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updates are approved by the user, the client application 104 
downloads the software update, verifies its integrity...) 

6. What Cheng does not explicitly teach is: 

determining the authenticity of the received notification in the electronic device, 
by sending, by the electronic device, information retrieved from the received notification 
to the notification history server, and determining whether the notification history server 
has a record of the notification using information sent by the electronic device; 

7. Sadowsky discloses 

determining the authenticity of the received notification in the electronic device, 
by sending, by the electronic device, information retrieved from the received notification 
to the notification history server, and determining whether the notification history server 
has a record of the notification using information sent by the electronic device (see 
figs. 3, which discloses authentic and valid 64; see fig. 4, 
which discloses push notification? ... package authentic?; col. 4, 
lines 40-50, which discloses that the authenticity of the e-mail 
notification package 12 is tested ... if the package 12 is found 
to be non-authentic , processing is terminated...) 

Accordingly it would have been obvious to one of ordinary skill in the art at time 
of applicant's invention to modify the method of Cheng and incorporate the method 
comprising determining the authenticity of the received notification in the electronic 
device, by sending, by the electronic device, information retrieved from the received 
notification to the notification history server, and determining whether the notification 
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history server has a record of the notification using information sent by the electronic 
device in view of the teachings of Sadowsky in order to ensure that the notice message 
is from the authorized vendor. 

8. As per claim 2, Cheng further discloses the method, further comprising: 
simultaneously informing the notification history server that a notification has 

been sent to the electronic device (see fig. 1 ; 01 1 5). 

9. As per claim 4 , Cheng further discloses the method, further comprising: 
ignoring the notification in the electronic device upon determining that the 

notification is inauthentic (see fig. 12); 

recording that an inauthentic notification has been received (see fig. 12); and 
waiting to receive another notification in the electronic device (see fig. 12). 

10. As per claim 5 , Cheng further discloses the method, further comprising: 
determining identification information of a server and update package associated 

with the notification upon determining that the notification received in the electronic 
device is authentic (0012; 0040; 0079; 0082, which discloses identifying the location of 
the relevant updates files). 

11. As per claim 6 , Cheng further discloses the method, further comprising: 
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retrieving the update package (0082, which discloses downloads the software 
update files); and 

performing an update of at least one of firmware and software resident in the 
electronic device (0083, which discloses that the software update is then installed). 

12. As per claim 7 , Cheng further discloses the method, wherein the notification 
comprises one of a short message service (SMS) notification, an instant messaging (IM) 
notification, an email notification, a wireless application protocol (WAP) push message 
notification, and an enhanced messaging service (EMS) notification (0114). 

13. As per claim 9 , Cheng failed to explicitly disclose the method, wherein 
determining the authenticity of the notification in the electronic device further comprises 
determining whether the notification was sent from an authorized server. 

Sadowsky discloses the method, wherein determining the authenticity of the 
notification in the electronic device further comprises determining whether the 
notification was sent from an authorized server (col. 4, lines 40-50) 

Accordingly it would have been obvious to one of ordinary skill in the art at time 
of applicant's invention to modify the method of Cheng and incorporate method, wherein 
determining the authenticity of the notification in the electronic device further comprises 
determining whether the notification was sent from an authorized server in view of the 
teachings of Sadowsky in order to ensure that the notice message is from the 
authorized vendor. 
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14. As per claim 10 , Cheng further discloses the method, wherein an authorized 
server comprises one of a management server and a customer care center (see fig. 1). 

15. As per claim 11 , Cheng further discloses the method, wherein the notification 
comprises location and identification information regarding a management server 
providing access to an update package and information regarding the update package 
(0034, 0043; 0082). 

16. As per claim 12 , Cheng further discloses the method, wherein location and 
identification information comprise at least one of a universal resource locator (URL), an 
internet protocol (IP) address, a dynamic security key, end-user data, program update 
information, download scheduling information, and notification protocol information (see 
fig. 12; 0043; 0082). 

17. As per claim 13 . Cheng further discloses the method, further comprising 
retrieving an update package from a default management server by accessing an 
address of the default management server when no server address information is 
included in the notification, the address of the default management server being 
provisioned in the electronic device during a bootstrap provisioning event (see fig. 1 ; 
0043). 
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18. As per claim 14 , Cheng failed to explicitly disclose the method, wherein 
retrieving the update package from the default management server is performed after 
authentication of the notification message. 

Sadowsky discloses the method, wherein retrieving the update package from the 
default management server is performed after authentication of the notification message 
(col. 4, lines 40-50) 

Accordingly it would have been obvious to one of ordinary skill in the art at time 
of applicant's invention to modify the method of Cheng and incorporate method, wherein 
wherein retrieving the update package from the default management server is 
performed after authentication of the notification message in view of the teachings of 
Sadowsky in order to ensure that the notice message is from the authorized vendor. 

19. As per claim 15 , Cheng further discloses the method, further comprising: 
retrieving an update package via a download agent in the electronic device (see 

fig. 2; 0082); and 

updating at least one of firmware and software in the electronic device via an 
update agent in the electronic device (see fig. 2; 0083). 

20. As per claim 16 , Cheng further discloses the method, further comprising 
preventing unauthorized updates of at least one of firmware and software in the 
electronic device (see fig. 12). 
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21 . As per claim 17 , Cheng failed to explicitly disclose the method, wherein 
preventing unauthorized updates further comprises: 

when a notification sent to the electronic device is discernable by an end-user 
and the end-user is prompted to initiate an update process, and when the end-user 
initiates the update process, the electronic device is adapted to determine the 
authenticity of the notification, and abort the update process if the notification is 
determined to be inauthentic, and permit the update package to be downloaded, if the 
notification is determined to be authentic. 

Sadowsky discloses the method, wherein preventing unauthorized updates 
further comprises: 

when a notification sent to the electronic device is discernable by an end-user 
and the end-user is prompted to initiate an update process, and when the end-user 
initiates the update process, the electronic device is adapted to determine the 
authenticity of the notification, and abort the update process if the notification is 
determined to be inauthentic, and permit the update package to be downloaded, if the 
notification is determined to be authentic (col. 4, lines 40-50). 

Accordingly it would have been obvious to one of ordinary skill in the art at time 
of applicant's invention to modify the method of Cheng and incorporate method, wherein 
preventing unauthorized updates further comprises: when a notification sent to the 
electronic device is discernable by an end-user and the end-user is prompted to initiate 
an update process, and when the end-user initiates the update process, the electronic 
device is adapted to determine the authenticity of the notification, and abort the update 
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process if the notification is determined to be inauthentic, and permit the update 
package to be downloaded, if the notification is determined to be authentic in view of the 
teachings of Sadowsky in order to ensure that the notification message is from the 
authorized vendor. 

22. As per claim 18 , Cheng further discloses the method, wherein preventing 
unauthorized updates further comprises: 

receiving a dynamic key component from a management server in the electronic 
device (0092; 0117); 

accessing a static key component from memory in the electronic device (01 17); 

and 

instructing a download agent to use the dynamic key component and the static 
key component to generate a security key, wherein the generated security key 
facilitates access to a downloadable update package in an update package repository if 
the electronic device is authorized access to the update package, otherwise the 
electronic device is denied access to the update package (0082; 0092). 

23. As per claim 19 , Cheng further discloses the method, further comprising: 
provisioning an address of a management server in the electronic device during 

a bootstrap provisioning event by sending a notification, the notification comprising 
server address information, and wherein the electronic device is adapted to access and 
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employ the address of the management server provisioned in the electronic device after 
the bootstrap provisioning event (0034). 

24. Claim 8 , is rejected under 35 U.S.C. 103(a) as being unpatentable over Cheng et 
al (hereinafter "Cheng") U.S. Patent No. 2006/0282834 A1 in view of Sadwosky U.S. 
Patent No. 6,123,737 as applied to claim 1 above, and further in view of Serbinis et 
al(hereinafter "Serbinis") U.S. Patent No. 6,314,425 B1 . 

25. As per claim 8 , both Cheng and Sadowsky failed to explicitly disclose the 
method, wherein the electronic device comprises one of a mobile cellular phone 
handset, a personal digital assistant, a pager, an MP3 player, and a digital camera. 

Serbinis discloses the method, wherein the electronic device comprises one of a 
mobile cellular phone handset, a personal digital assistant, a pager, an MP3 player, and 
a digital camera (col. 5, lines 30-52). 

Accordingly it would have been obvious to one of ordinary skill in the art at time 
of applicant's invention to modify the method of Sadwosky and incorporate the method 
wherein the electronic device comprises one of a mobile cellular phone handset, 
personal digital assistant, pager, MP3 player, and a digital camera in view of the 
teachings of Serbinis in order to identify the equipment employed. 
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26. Claims 20-22 and 24-38 , are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Sadwosky U.S. Patent No. 6,123,737 in view of Serbinis et al U.S. 
Patent No. 6,314,425 B1. 

27. As per claim 20 , Sadowsky discloses a mobile services network at least 
comprising: 

at least one electronic device (see fig. 1 ; client computer); 

a management server communicatively linked with the at least one electronic 
device via a communication link; and 

a notification history server operatively connected to the management server, the 
notification history server comprising a record of authentic notifications sent to the at 
least one electronic device by authorized senders, the authorized senders being distinct 
from the notification history server (see fig. 1, which discloses servers 
2 (1) ...server (2 (n) ) ; 

wherein the electronic device is adapted to determine the authenticity of a 
notifications received from a sender by contacting the notification history server and 
determining whether the notification history server has a record, from one of the 
authorized senders, of the notification received by the electronic device {see figs. 
3, which discloses authentic and valid 64; see fig. 4, which 
discloses push notification? ... package authentic?; col. 4, lines 
40-50, which discloses that the authenticity of the e-mail 
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notification package 12 is tested ... if the package 12 is found 
to be non-authentic , processing is terminated...). 

28. What Sadwosky does not explicitly disclose is: 

a management server communicatively linked with the at least one electronic 
device via a communication link 

29. Serbinis discloses: 

a management server communicatively linked with the at least one electronic 
device via a communication link (see fig. 1, which discloses server 
computer 20 (l...n) coupled to the DMS database 25 and store 30). 

Accordingly it would have been obvious to one of ordinary skill in the art at time 
of applicant's invention to modify the method of Sadwosky by incorporating a distinct 
management server different from the notification server in view of the teachings of 
Serbinis in order to ensure that the notification package is authentic. 

30. As per claim 21 , Sadowsky further discloses the network, wherein the electronic 
device at least comprises: 

non-volatile memory (fig. 1, client computer); 

a short message entity; random access memory; and security services (fig. 1). 



31 . As per claim 22 , Sadowsky further discloses the network, wherein the non- 
volatile memory in the electronic device at least stores: 
an update agent (fig. 1); 
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a firmware and real-time operating system (fig. 1 ; col. 3, lines 5-20); 
an operating system layer (fig. 1; col. 3, lines 5-20); 
a download agent or browser (fig. 1); and 

an end-user related data and content (see abstract; software package 18). 

32. As per claim 23 , Sadwosky failed to explicitly disclose the network, wherein the 
electronic device comprises one of a mobile cellular phone handset, personal digital 
assistant, pager, MP3 player, and a digital camera. 

Serbinis discloses the network, wherein the electronic device comprises one of a 
mobile cellular phone handset, personal digital assistant, pager, MP3 player, and a 
digital camera (col. 5, lines 30-52). 

Accordingly it would have been obvious to one of ordinary skill in the art at time 
of applicant's invention to modify the method of Sadwosky and incorporate the network 
comprising network, wherein the electronic device comprises one of a mobile cellular 
phone handset, personal digital assistant, pager, MP3 player, and a digital camera in 
view of the teachings of Serbinis in order to identify the equipment employed. 

33. As per claim 24 , Sadowsky failed to explicitly disclose the network, wherein the 
electronic device is adapted to receive notifications informing the electronic device of 
availability of update packages at the management server 
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Serbinis discloses the network, wherein the electronic device is adapted to 
receive notifications informing the electronic device of availability of update packages at 
the management server (col. 10, lines 50-60) 

Accordingly it would have been obvious to one of ordinary skill in the art at time 
of applicant's invention to modify the method of Sadwosky by incorporating the network, 
wherein the electronic device is adapted to receive notifications informing the electronic 
device of availability of update packages at the management server in view of the 
teachings of Serbinis in order to ensure efficiency 



34. As per claim 25, Sadwosky further discloses the network wherein the notification 
history server is adapted to determine whether a notification is authentic by examining 
message identification information in the notifications (see fig. 3 and 4; col. 4, lines 40- 
50). 



35. As per claim 26 , Sadwosky further discloses the network, wherein the electronic 
device is adapted to download an update package from an update package repository 
using an update agent upon determining that a notification received in the electronic 
device is authentic (see figs. 3 and 4; col. 4, lines 45-50). 



36. As per claim 27 . Sadwosky further discloses the network, wherein the electronic 
device is adapted to determine whether a notification originated from an authorized 
sender (col. 4, lines 45-50). 
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37. As per claim 28 , Sadwosky further discloses the network, wherein an authorized 
sender is at least one of the management server and a customer care center resident in 
the network (fig. 3). 

38. As per claim 29. Sadwosky failed to explicitly discloses the network, further 
comprising a short message center (SMC) adapted to store and forward messages to 
and from the electronic device, wherein the short message center (SMC) is adapted to 
send, upon instruction from the management server or a customer care center, 
notifications to the electronic device regarding availability of update packages. 

Serbinis discloses the network, further comprising a short message center (SMC) 
adapted to store and forward messages to and from the electronic device, wherein the 
short message center (SMC) is adapted to send, upon instruction from the management 
server or a customer care center, notifications to the electronic device regarding 
availability of update packages (col. 10, lines 50-60) 

Accordingly it would have been obvious to one of ordinary skill in the art at time 
of applicant's invention to modify the method of Sadwosky by incorporating the network, 
further comprising a short message center (SMC) adapted to store and forward 
messages to and from the electronic device, wherein the short message center (SMC) 
is adapted to send, upon instruction from the management server or a customer care 
center, notifications to the electronic device regarding availability of update packages in 
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view of the teachings of Serbinis in order to ensure that the notification package is 
authentic. 

39. As per claim 30 , Sadwosky further discloses the network, wherein notifications 
comprise at least one of a short message service (SMS) notification, an instant 
messaging (IM) notification, an email notification, a wireless application protocol (WAP) 
push message notification, and an enhanced messaging service (EMS) notification (see 
figs. 3, 4 and 5). 

40. As per claim 31 , Sadwosky further discloses the network, wherein notifications 
further comprise at least one user data field containing message identification 
information (fig. 5; col. 5, lines 50-65). 

41. As per claim 32 , Sadwosky failed to explicitly disclose the network, wherein 
notifications further comprise location and identification information regarding a 
management server providing access to an update package and information regarding 
the update package. 

Serbinis discloses the network, wherein notifications further comprise location 
and identification information regarding a management server providing access to an 
update package and information regarding the update package (see fig. 1; col. 10, lines 
50-60). 
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Accordingly it would have been obvious to one of ordinary skill in the art at time 
of applicant's invention to modify the method of Sadwosky by incorporating the network, 
wherein notifications further comprise location and identification information regarding a 
management server providing access to an update package and information regarding 
the update package in view of the teachings of Serbinis in order to ensure efficiency of 
the system. 

42. As per claim 33 , Sadwosky further discloses the network, wherein location and 
identification information comprise at least one of a universal resource locator, an 
internet protocol address, a dynamic security key, end-user data, program update 
information, download scheduling information, and notification protocol information (col. 
6, line 30-35). 

43. As per claim 34 , Sadwosky further discloses the network, wherein upon 
determining that a notification received in the electronic device is inauthentic, the 
electronic device is adapted to ignore the notification and wait for another notification, 
and a record is created recording that an inauthentic notification has been received (col. 
4, lines 40-50). 

44. As per claim 35 . Sadwosky further discloses the network, wherein the 
management server comprises the notification history server and an update package 
repository (fig. 1). 
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45. As per claim 36 , Sadwosky further discloses the network, wherein the 
notification history server is incorporated into a short message center in the network 
(see fig. 1). 

46. As per claim 37 , Sadwosky further discloses the network, further comprising a 
security service in the electronic device for preventing unauthorized updating of at least 
one of firmware and software in the electronic device (col. 4, lines 40-50). 

47. As per claim 38 , Sadwosky further discloses the network, wherein preventing 
unauthorized updates further comprises: 

when a notification sent to the electronic device is discernable by an end-user 
and the end-user is prompted to initiate an update process (col. 5, line 50-65), and 

when the end-user initiates the update process, the electronic device is adapted 
to determine the authenticity of the notification, and abort the update process if the 
notification is determined to be inauthentic, and permit the update package to be 
downloaded, if the notification is determined to be authentic (col. 4, lines 40-65). 

48. As per claim 39 , Sadwosky failed to explicitly disclose the network, wherein 
preventing unauthorized updates further comprises: 

receiving a dynamic key component from a management server in the electronic 
device; 
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accessing a static key component from memory in the electronic device; and 
instructing a download agent to use the dynamic key component and the static 
key component to generate a security key, wherein the generated security key 
facilitates access to a downloadable update package in an update package repository if 
the electronic device is authorized access to the update package, otherwise the 
electronic device is denied access to the update package. 

Serbinis discloses the network, wherein preventing unauthorized updates further 
comprises: 

receiving a dynamic key component from a management server in the electronic 
device (col. 3, lines 40-50; col. 21, lines 30-50); 

accessing a static key component from memory in the electronic device (col. 21 , 
lines 30-50); and 

instructing a download agent to use the dynamic key component and the static 
key component to generate a security key, wherein the generated security key 
facilitates access to a downloadable update package in an update package repository if 
the electronic device is authorized access to the update package, otherwise the 
electronic device is denied access to the update package (col. 21, lines 30-50). 

Accordingly it would have been obvious to one of ordinary skill in the art at time 
of applicant's invention to modify the method of Sadwosky and incorporate the network 
comprising receiving a dynamic key component from a management server in the 
electronic device; accessing a static key component from memory in the electronic 
device; and instructing a download agent to use the dynamic key component and the 
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static key component to generate a security key, wherein the generated security key 
facilitates access to a downloadable update package in an update package repository if 
the electronic device is authorized access to the update package, otherwise the 
electronic device is denied access to the update package in view of the teachings of 
Serbinis in order to ensure adequate security. 

49. As per claim 40, Sadwosky failed to explicitly disclose the network, wherein the 
network is adapted to provision the address of the management server in the electronic 
device during a bootstrap provisioning event by sending a notification, the notification 
comprising server address information, and wherein the electronic device is adapted to 
access and employ the address of the management server provisioned in the electronic 
device after the bootstrap provisioning event. 

Serbinis discloses a the network, wherein the network is adapted to provision the 
address of the management server in the electronic device during a bootstrap 
provisioning event by sending a notification, the notification comprising server address 
information, and wherein the electronic device is adapted to access and employ the 
address of the management server provisioned in the electronic device after the 
bootstrap provisioning event (col. 21, lines 1-25) 

Accordingly it would have been obvious to one of ordinary skill in the art at time 
of applicant's invention to modify the method of Sadwosky and incorporate the network 
comprising network, wherein the network is adapted to provision the address of the 
management server in the electronic device during a bootstrap provisioning event by 
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sending a notification, the notification comprising server address information, and 
wherein the electronic device is adapted to access and employ the address of the 
management server provisioned in the electronic device after the bootstrap provisioning 
event in view of the teachings of Hayes in order to ensure security. 



Conclusion 



50. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Charles C. Agwumezie whose number is (571) 272- 
6838. The examiner can normally be reached on Monday - Friday 8:00 am - 5:00 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Calvin Hewitt can be reached on (571) 272 - 6709. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see h^ll&M^^^^SQ!l - Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll free). If you would like assistance from a USPTO 
Customer Service Representative or access to the automated information system, call 
800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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